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DETAILED ACTION 
EXAMINER'S AMENDMENT 

1. An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as 
provided by 37 CFR 1.312. To ensure consideration of such an amendment, it 
MUST be submitted no later than the payment of the issue fee. 

2. Authorization for this examiner's amendment was given in a telephone interview 
with the applicant representative, Mr. Edmund P. Pfleger (Registration No. 
41252) on 05/05/09. During the telephone conference, Mr. Pfleger has agreed 
and authorized examiner to amend claims 2-6, 8, 10-13, 15 to overcome the 
deficiency associated with these claims. 

CLAIMS: 

a. Referring to claim 2 : 

Please replace following in line 1 , "A system" with "The system" 

b. Referring to claim 3 : 

Please replace following in line 1 , "A system" with "The system" 

c. Referring to claim 4 : 

Please replace following in line 1 , "A system" with "The system" 
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d. Referring to claim 5 : 

Please replace following in line 1 , "A system" with "The system" 

e. Referring to claim 6 : 

Please replace following in line 1 , "A system" with "The system" 

f. Referring to claim 8 : 

Please replace following in line 1 , "A system" with "The system" 

g. Referring to claim 10 : 

Please replace following in line 1, "An IC" with "The IC" 

h. Referring to claim 1 1 : 

Please replace following in line 1, "An IC" with "The IC" 

i. Referring to claim 12 : 

Please replace following in line 1, "An IC" with "The IC" 

j. Referring to claim 13 : 

Please replace following in line 1, "An IC" with "The IC" 



k. 



Referring to claim 15 : 
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Please replace following in line 1, "An IC" with "The IC" 

Response to Arguments 

3. Applicant's arguments, filed March 18, 2009 have been fully considered and are 
persuasive. 

Allowable Subject Matter 

4. Claims 1-6, 8-13, 15, 16 are allowed. 

Reasons for allowance: Allowable subject matter 

The following is an examiner's statement of reasons for allowance: The present 
invention is directed to an integrated firewall and VPN system. Independen claims 1, 9, 
16 recite the uniquely distinct feature of: 

an integrated firewallA/PN chipset configured to send and receive data packets between 
said WAN and said LAN, said chipset comprising : 
a firewall comprising 

a first layer including a header match packet filtering engine configured to 
provide pattern matching in selected headers of data, a second layer including a 
contents match packet filtering engine configured to analyze the scope of at least one 
data packet, a third layer including at least one application proxy configured to provide 
additional pattern matching using a hardware engine configured to provide pre-analvsis 
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processing to reduce the workload of a central processing unit (CPU) and a fourth layer 
including a session match engine configured to store a TCP/UDP connection setup in a 
look-up- table and to forward the setup progress to said CPU for tracking : 
a VPN configured to 

provide security functions for data between said LAN and said WAN, wherein said 
security functions are selected from the group consisting of encryption, decryption, 
encapsulation, and decapsulation of said data packets, said VPN including a VPN 
packet buffer configured to receive at least one of said data packets and to forward said 
at least one data packet to an inbound VPN processor configured to decrypt and 
decapsulate said at least one data packet, said VPN further including an inbound 
security database having a database of tunnels configured to provide said inbound VPN 
processor with tunnel information used to decrypt and decapsulate said at least one 
data packet, said VPN further including protocol instructions having microcodes 
configured to instruct said VPN processor to decrypt and decapsulate said at least one 
data packet according to a user-defined security procedure : and an interface configured 
to determine if said data packets are plain text or cipher text, said interface further 
configured to forward a preselected number of bytes to said firewall if said data packets 
are plain text, said interface further configured to forward said data packets to said VPN 
if said data packets are cipher text. 

The prior art of record, taken either singly or in combination, fails to anticipate or 
fairly suggest the limitations of applicant's independent claim, in such a manner that a 
rejection under 35 U.S.C 102 or 103 would be proper. The claimed invention is 
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therefore considered to be in condition for allowance as being novel and nonobvious 
over prior art. 

Conclusion 

5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to NIRAV PATEL whose telephone number is (571)272- 
5936. The examiner can normally be reached on 8 am - 4:30 pm (M-F). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/TV. P./ 

Examiner, Art Unit 2435 
/Kimyen Vu/ 

Supervisory Patent Examiner, Art Unit 2435 



